custom authentication flow that includes attributes

[Scott Koranda]

Hi,

I need to implement a custom authentication flow. As part of
the flow attributes about the user will be available. I would
like the IdP to then be able to assert those attributes
(possibly modified). The issue is how to get the attributes
"through the flow" and available for attribute resolution.

My first instinct is to have the custom flow store the
attributes in the IdP session and then code a custom data
connector that implements AbstractDataConnector as noted here:

https://wiki.shibboleth.net/confluence/display/IDP30/3.+Developing+Attribute+Resolver+Extensions

The custom data connector would simply get the parent of the 
AttributeResolutionContext it is passed, and then from that
get the session context and then find the attributes in the
session.

Does that approach sound feasible?

Is there a more elegant approach I am missing?

Thanks,

Scott K